Privacy policy for FontDetector Pro
FontDetector Pro by NITIWEB
Overview
FontDetector Pro is a cross-browser extension designed to identify, analyze, and work with fonts on web pages. The extension helps web designers, developers, and typography enthusiasts detect fonts, build font collections, and test font applications. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
1. Font and Typography Data (Locally Processed)
Font information from web pages - Font family, style, weight, size, color
Font collections - User-saved fonts and collections stored locally
Font files - Binary data (ArrayBuffer) of downloaded fonts
User preferences - Extension settings and configuration
Important: Font data is processed locally in your browser. Font collection data is only sent to our servers when you add fonts to collections (for analytics purposes only).
2. Google Fonts Integration Data
When you use Google Fonts features:
Requests to Google Fonts API for font catalog and downloads
Font preview data and metadata
Google Fonts privacy policy applies: Google Fonts FAQ
3. License Information (Premium Features)
When you use premium features, we process:
License keys - User-provided keys for premium feature activation
License validation data - Verification of premium access (license key only)
Activation status - Whether premium features are unlocked
Payment Processing: All payment processing happens entirely on Stripe's platform. The extension never accesses, processes, or stores any payment information.
4. Font Analytics Data
Top Fonts tracking - Aggregated data on most popular fonts added to collections
Font usage notifications - Server notifications when fonts are added to collections (font metadata only)
Font file size - Size in KB for bandwidth optimization
5. Technical Data
Extension usage statistics (locally stored)
Error logs for debugging (no personal data)
Browser session data for functionality
License validation requests for premium feature access verification
6. License Validation Service
Service Provider: Backend API license validation service
Purpose: Verify premium feature access and prevent license abuse
Data Transmitted to API Server:
Device identifier (generated unique ID based on crypto.randomUUID())
Extension version number
Timestamp of validation request
Validation Endpoints:
/api/check-subscription (subscription status validation)
Frequency:
Manual check when user clicks "Check subscription" button
Cached validation results for 24 hours
On-demand validation for premium feature access
Security Metadata Stored Locally:
Last validation timestamp (encrypted)
Device ID for subscription binding
Subscription expiry date (encoded with salt)
No Personal Data: No names, emails, payment info, font data, or browsing history sent
Minimal Server Logging: Only technical logs for fraud prevention and debugging
Data Retention: Server logs automatically deleted after 30 days maximum
Security: All transmissions use HTTPS encryption with secure headers
How We Use Your Information
Core Functionality
Font Detection: Identify fonts used on web pages using Canvas API
Font Collections: Store and organize user-saved fonts locally
Font Application: Apply fonts to page elements for testing purposes
Color Analysis: Extract color palettes from web pages
Font Download: Save font files for offline use
Premium Features and Licensing
Subscription Validation: Verify premium feature access through Stripe subscriptions
Feature Unlocking: Enable unlimited collections, font testing, and downloads
Subscription Management: Store activation status locally
Third-Party Integrations
Google Fonts API: Access font catalog and download Google Fonts
Top Fonts Analytics: Aggregate popular fonts data from user collections
Local Processing: Font detection and analysis happens locally in browser
Premium Features and Billing
Payment Model
External Payment Processing: Subscriptions processed through Stripe Checkout
No In-Extension Payments: Extension doesn't process or handle payments
Monthly Subscription: Premium features for $2.99/month
Subscription Management: Manage through Stripe Customer Portal
Subscription Management
Device ID System: Unique ID generated for each browser installation
Local Storage: Subscription status stored locally in encrypted format
Validation: On-demand verification with API server (Device ID only)
24-Hour Cache: Subscription checks cached for better performance
Refund Policy: Refunds are not provided, as once premium features are activated, they cannot be cancelled.
Data Storage and Security
Local Storage Methods
Browser Storage API: Extension settings and preferences (Chrome, Edge, Firefox compatible)
IndexedDB Database: Font collections, font files (ArrayBuffer), Top Fonts cache, Google Fonts catalog
Local Caching: Top Fonts data (24 hours), Google Fonts data
chrome.storage.sync: Device ID and subscription status (synced across devices)
Subscription Information: Premium activation status (encrypted locally)
IndexedDB Storage Details
Enhanced Local Storage: The extension uses IndexedDB for robust local data management
Font Collections Database:
User-created font collections with custom names and colors
Collection metadata (creation dates, modification times)
Font-to-collection associations
All data stored locally in your browser's IndexedDB
Font Files Database:
Binary font data stored as ArrayBuffer
Font metadata (family, style, weight, format)
Base64 encoded font data for quick access
Font file size information
Top Fonts Cache:
Cached list of top 10 popular fonts
Font preview data and metadata
Cache timestamp for 24-hour refresh cycle
Font usage statistics
Google Fonts Cache:
Google Fonts catalog data
Font family information and categories
Font preview URLs and metadata
Search and filter optimization data
Data Persistence:
All IndexedDB data persists across browser sessions
Data survives extension updates and browser restarts
Manual export/import of font collections
Automatic cache cleanup after 24 hours
Privacy Protection:
All IndexedDB data stored locally on your device
No automatic synchronization to external servers
Data only accessible by the extension itself
Complete user control over data deletion
Security Measures
Shadow DOM Isolation: Modal UI isolated from page content to prevent style conflicts
Content Script Isolation: Extension runs in isolated browser context across all supported browsers
HTTPS Encryption: All external API calls use secure connections
Subscription Encryption: Premium activation data is encrypted locally with salt-based encoding
IndexedDB Security: Database access restricted to extension origin only
Cross-Browser Compatibility: Security measures consistent across Chrome, Edge, and Firefox
No Payment Data: Extension never accesses or stores payment information
Local Data Protection: All IndexedDB data encrypted and isolated per browser profile
Canvas API Security: Font detection uses Canvas API without storing rendered content
Permissions Explained
Host Permissions
"<all_urls>" - Access any website to detect fonts and colors
"https://fonts.googleapis.com/" - Google Fonts API integration
"https://fonts.gstatic.com/" - Google Fonts file downloads
Browser Permissions
"storage" - Save font collections and subscription information locally
"tabs" - Access tab information for font detection
"activeTab" - Interact with current page for font inspection
"contextMenus" - Add right-click menu options ("Inspect Page Fonts", "Show Font Collections")
"scripting" - Inject font inspector and modal UI into web pages
Third-Party Services
Payment Processing (External)
Stripe Checkout: Monthly subscriptions ($4.99/month) processed on Stripe's platform
Stripe Customer Portal: Subscription management handled by Stripe
Payment Isolation: Extension never handles payment data or processes transactions
Data Collection: Payment and billing handled entirely by Stripe
Security: Stripe provides PCI DSS Level 1 compliant payment processing
Privacy Policy: https://stripe.com/privacy
Google Fonts API
Font Catalog: Access to complete Google Fonts library
Font Downloads: Direct downloads from Google Fonts servers
Free Fonts: All Google Fonts are open source and free to use
Privacy Notice: Google Fonts privacy policy applies: Google Fonts FAQ
Subscription Validation Service
Service Provider: Backend API server
Purpose: Verify premium feature access and prevent subscription abuse
Data Processing: Server-side validation prevents local subscription tampering
Data Transmitted:
Device identifier (generated unique ID)
Extension version
Timestamp of validation request
Validation Process:
On-demand validation when user clicks "Check subscription"
Results cached for 24 hours
No automatic background checks
No Personal Data: No font data, user names, emails, or payment information sent
Minimal Server Logging: Technical logs only for fraud prevention and debugging
Data Retention: Automatic log deletion after 30 days maximum
Top Fonts Analytics
Font Popularity Tracking: Aggregated statistics on fonts added to collections
Server Notifications: Background requests when fonts are added to collections
Data Transmitted: Font metadata (family, style, weight), file size, Base64 encoded font data (chunked)
Purpose: Generate "Top 10 Fonts" ranking for community
No Personal Data: No user identification or browsing history collected
Your Rights and Choices
Data Control
Font Inspector: Enable/disable font inspection mode at any time
Local Storage: All your font collections stay in your browser's local storage and IndexedDB
Collection Management: Create, edit, delete font collections at will
Clear Data: Uninstall extension to remove all local data and IndexedDB entries
Subscription Management: View and manage your premium subscription status
IndexedDB Management:
View all stored font collections and fonts through extension interface
Export font collections to JSON format for backup or migration
Delete individual fonts or entire collections
Clear cache data (Top Fonts, Google Fonts) manually
Browser developer tools access for advanced data inspection
Cross-Browser Data: Data stored independently in each browser installation
Synced Settings: Device ID and subscription status sync via chrome.storage.sync
Subscription and Payment Rights
Subscription Portability: Subscription status syncs across devices with same Device ID
Payment Data: Managed entirely by Stripe (refer to their privacy policy)
Support Access: Contact support for subscription-related issues
Cancellation: Cancel subscription anytime through Stripe Customer Portal
Refund Requests: Handle refunds through Stripe payment platform
Data Portability
Export Features: Export your font collections anytime
Standard Formats: Font collections exported in JSON format, fonts as binary files
No Lock-in: Font collections remain accessible even without premium subscription
Subscription Sync: Subscription status syncs across devices via chrome.storage.sync
Cross-Browser Migration:
Export collections from Chrome and import to Edge (or vice versa)
Complete font collection portability
Font files (ArrayBuffer) transferable between browsers
Backup and restore functionality for collection protection
IndexedDB Export:
Complete database dump available through extension interface
Export collections with font metadata and binary data
Selective export by collection
Import validation ensures data integrity during migration